OCT 



13 



2005 2, 



Title: 
Inventor: 
App. No.: 
Docket No.: 
Sheet: 



^m^^y 100 



104 



RECEIVE A 
PLURALITY OF 
SERVICES AT A 
CABLE HEAD END 



SELECT A LEVEL OF 
ENCRYPTION AT 

WHICH TO ENCRYPT 
A FIRST SET OF 
SERVICES 



I 



112 



STORE A FIRST SET 
OF ENCRYPTION 

DATA ASSOCIATED 
WITH SAID FIRST 
DATA STREAM 



I 



116 



STORE ENCRYPTION 
KEYS AS PART OF 
THE ENCRYPTION 
DATA 



I 



120 



DETERMINE THE 
NUMBER OF 
SERVICES THAT CAN 
BE UTILIZED AT THE 
SELECTED LEVEL OF 
ENCRYPTION 



I 



124 



COMBINE THE 
ALLOWABLE 
SERVICES INTO A 
FIRST DATASTREAM 



I 



128 



ENCRYPT THE 
SERVICES 



Configurable Encryption/Decryption for Multiple Services Support 

Qiu Xin et al. 

09/587,932 

D02308 

1 of 10 



l/IO 



132 



TRANSMIT THE FIRST 
DATASTREAM OF 

ENCRYPTED 
SERVICES TO THE 
CUSTOMER 



DETERMINE A 
CHANGE IN 
CUSTOMER 
PROGRAM 
REQUIREMENTS 



SELECT A SECOND 
(DIFFERENT) LEVEL 
OF ENCRYPTION AT 
WHICH TO ENCRYPT 
A SECOND SET OF 
SERVICES 



I 



144 



RECONFIGURE 
ENCRYPTION 
PROCESSOR TO 
REALLOCATE 
MEMORY FOR 
STORING A SECOND 
SET OF ENCRYPTION 
DATA 



STORE A SECOND 
SET OF ENCRYPTION 
DATA ASSOCIATED 
WITH THE SECOND 
DATA STREAM 



152 



STORE ENCRYPTION 

KEYS AS PART OF 
THE SECOND SET OF 
ENCR YPTION DATA 

I 



REPLACEMENT SHEET 



154 



DETERMINE THE 
NUMBER OF 
SERVICES THAT CAN 
BE UTILIZED AT THE 
NEW LEVEL OF 
ENCRYPTION 



I 



158 



COMBINE THE 
ALLOWABLE 
SERVICES INTO A 
SECOND 
DATASTREAM 



♦ ^62 



UTILIZE A COMMON 

MEMORY TO 
ENCRYPT THE FIRST 
DATA STREAM AT THE 
FIRST LEVEL OF 
ENCRYPTION AND 
THE SECOND DATA* 

STREAM AT THE 
SECOND LEVEL OF 
ENCRYPTION 



ENCRYPT THE 
SERVICES 



TRANSMIT THE 

SECOND 
DATASTREAM OF 

ENCRYPTED 
SERVICES TO THE 
CUSTOMER (E.G., TO 
A SET-TOP BOX) 



( END 



FIG. 1A. 



Title: Configurable Encryption/Decryption for Multiple Services Support 

Inventor Qiu Xin et al. 

App. No.: - 09/587,932 
Docket No.: D02308 
Sheet: 2 of 10 

REPLACEMENT SHEET 2/10 



172 



STORING A PLURALITY 
OF DECRYPTION 
ALGORITHMS IN 
MEMORY AT A 
RECEIVER (E.G., A SET- 
TOP BOX) 



I ^176 



STORE DECRYPTION 
KEYS AS PART OF THE 
FIRST SET OF 
DECRYPTION DATA 



I 



180 



RECEIVE FIRST 
DATASTREAM 



I 



184 



DECRYPT THE 
DATASTREAM HAVING 
THE FIRST LEVEL OF 

ENCRYPTION 



I 



188 



RECONFIGURE 
DECRYPTION 
PROCESSOR TO 
REALLOCATE MEMORY 
FOR STORING A 
SECOND SET OF 
ENCRYPTION DATA 



i 



192 



STORE A SECOND SET 
OF DECRYPTION DATA 
ASSOCIATED WITH THE 
SECOND LEVEL OF 
ENCRYPTION 



196 



STORE DECRYPTION 
KEYS AS PART OF THE 
SECOND SET OF 
DECRYPTION DATA 



I 



-197 



RECEIVE SECOND 
DATASTREAM 



I 



198 



DECRYPT THE SECOND 
DATA STREAM 



I 



199 



UTILIZE A COMMON 
MEMORY TO DECRYPT 

THE FIRST DATA 
STREAM AT THE FIRST 
LEVEL OF ENCRYPTION 

AND THE SECOND 
DATASTREAM AT THE 
SECOND LEVEL OF 
ENCRYPTION 



END J 



FIG. 1B. 



Title: Configurable Encryption/Decryption for Multiple Services Support 

Inventor * Qiu Xin et al. 

App. No.: . 09/587,932 
Docket No.: D02308 
Sheet: 3 of 10 

REPLACEMENT SHEET 

3/10 




Title: Configurable Encryption/Decryption for M^fefpte Services Support 

Inventor: - Qiu Xin et al. * 

App. No.: 09/587,932 
Docket No.: D02308 
Sheet: 4 of 10 

REPLACEMENT SHEET 

4/10 




CO 
CO 
CO 



a. 
>- 

o 



co 

CO 



CO 
LU 
O 

> 

UJ 
CO 

X 



X 



CO 



CD 
EC 



=tfc 
UJ 

o 

8 1 



o 

CN 

CO 



=tfc 
LU 
O 

> 

LU 

CO 







< 
LLI 




31 


Q 


UJ 




_J 


UJ 


CO 




< 




o 





Title: 
Inventor 
App. No.: 
Docket No.: 
Sheet: 



Configurable Encryption/Decryption for Multiple Services Support 
Qiu Xin et al. rK 
09/587,932 

D02308 ' 
5 of 10 



REPLACEMENT SHEET 

5/10 



416 



-420 



ALU 



REGISTER 1 



424 



REGISTER M 



428 



INTERNAL RAM 



404- 



408 



EXTERNAL RAM 



z: 



412 



EXTERNAL ROM 



400 



Z7 



FIG. 4. 



Title: 
Inventor 
App. No.: 
Docket No.: 
Sheet: 



Configurable Encryption/Decryption for Multiple Services Support 

Qiu Xin et al. 

09/587,932 

D02308 

6 of 10 



REPLACEMENT SHEET 

6/10 



Plaintext 



Plaintext 



Key A 

_JL_ 



DES 



Ciphertext 



Encrypt: C = E A (P) 



Key A 



DES" 



Ciphertext 



Decrypt: P = E A (C) 





A 

1 






1DES 




Plaintext* 


Ciphertext 






A 




► 


1DES" 1 




Plaintext 


Ciphertext 



FIG. 5. 



Title: 
Inventor: 
App. No.: 
Docket No.: 
Sheet: 



Configurable Encryption/Decryption for Multiple Services Support 

Qiu Xin et al. 

09/587,932 

D02308 

7 of 10 

REPLACEMENT SHEET 

7/10 



Plaintext 



Key A 



Key B 



DES 


► 


DES 1 










Key A 



DES 



Ciphertext 



Plaintext 



A B 



3DES 



Ciphertext 



Encrypt: C = E A D B E A (P) 



Ciphertext 



Key A 



DES- 



Key B 



DES 



Key A 



DES 1 



Plaintext 



Ciphertext 



A B 



3DES- 



Plaintext 



Decrypt: P = D A E B D A (C) 



FIG. 6. 



Title: 
Inventor 
App. No.: 
Docket No.: 
Sheet: 



Configurable Encryption/Decryption for Multiple Services Support 

Qiu Xin et al. 

09/587,932 

D02308 

8 of 10 



REPLACEMENT SHEET 

8/10 



Plaintext 



Key A 




Key B 




Key C 


DES 


► 


DES' 1 




DES 




► 



Ciphertext 



Plaintext 



ABC 



3DES 



Ciphertext 



Encrypt: C = E C D B E A (P) 



Ciphertext 



Key C 



DES" 



Key B 



DES 



Key A 



DES- 



Plaintext 





ABC 
* + * 







3DES- 1 




Ciphertext 


► 

Plaintext 



Decrypt: P = D A E B D C (C) 



FIG. 7. 



Title: Configurable Encryption/Decryption for Multiple Services Support 

Inventor Qiu Xin et al. 

App. No.: 09/587,932 

• Docket No.: D02308 

Sheet: 9 of 10 



REPLACEMENT SHEET 

9/10 



IV1 



i 



Key A 

_i_ 
DES 



Plaintext 



IV2 



Key B 
+ 


IV3 

a. 


Key C 
♦ 


DES" 1 




DES 





Plaintext 



ABC 

±±± 



3DES4 



Ciphertext 



Encrypt: C = E C D B E A (P) 



IV4 



Ciphertext 



IV4 



Key C 



DES 



-1 



IV3 



U 



Ciphertext 



Key B 


IV2 


Key A 

+ 


IV1 


DES 


-L 


DES' 1 









Plaintext 





ABC 

1 1 + 






3DES4" 1 




Ciphertext 


► 

Plaintext 



Decrypt: P = D A E B D C (C) 



FIG. 8. 



" Configurable Encryption/Decryption for Multiple Services Support 

Qiu Xin et al. 
. 09/587,932 

D02308 

lOoflO 

REPLACEMENT SHEET 

10/10 DES-ABC4 
SINGLE DES DES-ABA DES-ABC (2 SERVICES 

(16 SERVICES) (8 SERVICES) (4 SERVICES) -4 IVS) 



MODE - 00 


MODE - 01 


MODE - 10 


MODE - 11 




C-IV 




C-IV 




C-IV 


NOT. 








' N-IV 




N-IV 




N-IV 


USEDl 






so< 

>• 

S1- 
S2- 


C-A-0 




C-A-0 




C-A-0 


0 




C-A-0 


N-A-0 


SO- 


N-A-0 




N-A-0 






N-A-0 


C-A-1 


C-B-0 


SO- 


C-B-0 






C-B-0 


N-A-1 


> 


N-B-0 


N-B-0 






N-B-0 


C-A-2 


C-A-1 




C-C-0 






C-C-0 


N-A-2 


S1- 


N-A-1 




N-C-0 


ou 




N-C-0 


>- 

S3- 
S4- 

> 

S5- 


C-A-3 


C-B-1 


NOT. 






C-IVO-0 


N-A-3 




N-B-1 


USED 




7 




N-IVO-0 


C-A-4 


> 


C-A-2 




C-A-1 


8 




C-IV1-0 


N-A-4 


S2- 


N-A-2 




N-A-1 






N-IV1-0 


C-A-5 


C-B-2 


S1- 


C-B-1 






C-IV2-0 


N-A-5 


> 


N-B-2 


N-B-1 






N-IV2-0 


> 

S6- 
S7* 


C-A-6 


C-A-3 




C-C-1 






C-IV3-0 


N-A-6 


S3- 


N-A-3 




N-C-1 






N-IV3-0 


C-A-7 


C-B-3 


> 

NOT 




NOT 




N-A-7 




N-B-3 


USED 

> 




15USED 
16 






S8< 


C-A-8 




C-A-4 




C-A-2 




C-A-1 


N-A-8 




N-A-4 




N-A-2 






N-A-1 


> 

S9- 


C-A-9 


C-B-4 


S2- 


C-B-2 






C-B-1 


N-A-9 




N-B-4 


N-B-2 






N-B-1 


> 

S10- 

> 

S11- 


C-A-1 0 


> 


C-A-5 




C-C-2 






C-C-1 


N-A-1 0 




N-A-5 




N-C-2 


O I 




N-C-1 


C-A-1 1 


C-B-5 


NOT 






C-IV0-1 


N-A-1 1 




N-B-5 


USED 




23 




N-IVO-1 


> 

S12< 


C-A-1 2 


J. 


C-A-6 


> 


C-A-3 


24 




C-IV1-1 


N-A-1 2 




N-A-6 




N-A-3 






N-IV1-1 


> 

S13- 
S14" 


C-A-1 3 


S6« 


C-B-6 


S3- 


C-B-3 






C-IV2-1 


N-A-1 3 




N-B-6 




N-B-3 






N-IV2-1 


C-A-1 4 




C-A-7 




C-C-3 






C-IV3-1 


N-A-1 4 




N-A-7 




N-C-3 




> 


N-IV3-1 


S15- 


C-A-1 5 


S7- 


C-B-7 


NOT 




NOT 


A 




N-A-1 5 




N-B-7 


USED 




31 USED 







C: CURRENT N: NEXT S: SERVICE x-x-xx: C/N-KEY A/B/C-S 



FIG. 9A. FIG. 9B. FIG. 9C. FIG. 9D. 



